Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File:                     hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier:          OMhTwwFpG+88aw2U9MA8Xfpcck3/mudOq9xqcTxCJow=
Subject key identifier:   67:E6:B0:4A:F8:5E:8C:2A:5D:09:5B:CA:53:BC:DC:93:F3:98:65:5E
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer:       /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial:       01962F3D3C05E6AA018E1396E78B71A5097E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number:          0D
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
                          2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: 8KxZNv0/qKRqlMStHGGhgd+qIa+AvstoHqOyYXHy3I8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3c:05:e6:aa:01:8e:13:96:e7:8b:71:a5:09:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=67e6b04af85e8c2a5d095bca53bcdc93f398655e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:26:f7:28:1f:55:ef:cb:d9:2f:5d:44:c5:
                    63:be:79:b2:5b:45:45:7e:f8:73:6d:64:74:34:68:
                    b9:d5:96:7a:c0:ec:77:4c:7f:35:e2:5d:d1:40:09:
                    cb:d6:36:fb:2c:21:bd:ff:04:d7:44:f3:74:a9:86:
                    60:fd:52:d3:02:a8:59:02:98:d2:ed:c8:79:a7:49:
                    b0:50:39:a4:01:11:f4:21:c8:18:1d:6c:11:66:91:
                    fd:d2:9c:9b:8b:d9:8b:7a:75:cd:7b:49:0d:dc:51:
                    ac:9b:fa:68:41:82:e4:8c:7c:17:3c:d9:20:58:70:
                    58:2c:73:ce:fc:27:33:21:f9:cc:4a:ed:f7:0d:15:
                    3c:84:a1:3a:53:f2:cd:69:5a:4e:fa:79:b8:2d:55:
                    3b:bc:39:e6:9f:01:18:39:06:23:fd:25:f7:1c:3b:
                    12:53:05:11:7f:31:6e:db:fb:7e:09:23:32:df:b1:
                    66:63:0d:20:81:1a:47:ec:3e:30:b6:2b:7f:d6:20:
                    8e:ba:9f:49:7f:e7:89:b9:67:5f:84:d0:4d:95:02:
                    3e:4e:99:7c:8b:c2:1e:2d:32:72:d1:65:6d:ab:1c:
                    12:04:39:60:2d:3f:dd:06:2a:2a:72:87:7f:cf:97:
                    a4:33:7b:57:c8:a7:bf:71:35:57:24:1c:ba:c1:a7:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:B0:4A:F8:5E:8C:2A:5D:09:5B:CA:53:BC:DC:93:F3:98:65:5E
            X509v3 Authority Key Identifier:
                keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:00:a6:98:b6:45:d6:90:20:e0:ac:cf:b1:ba:48:70:0d:
         68:7a:03:82:82:56:36:11:3a:3b:b0:e4:a5:56:4d:eb:ca:a6:
         f9:bc:4c:ea:50:96:9d:8f:f7:81:33:9f:c4:fc:e7:0b:e1:95:
         82:35:ee:eb:9b:ca:61:29:ef:4a:b7:cc:fa:d4:d9:1f:1e:62:
         6d:1a:39:bb:11:b5:e9:74:d1:67:2d:0b:3d:08:f4:a4:5c:2c:
         fd:64:1d:1d:2e:42:01:ca:7b:a1:3c:ba:9b:5c:ea:dd:04:90:
         ca:03:48:21:cb:51:a5:d5:c5:e7:78:99:2c:5b:da:b7:bd:db:
         40:e6:42:29:b4:e4:5c:ff:1a:bb:61:e6:26:8f:b7:44:71:fa:
         c0:f1:09:7b:1d:09:67:14:7b:9b:b0:5a:b2:1a:cb:d6:bd:64:
         54:b5:5b:be:f2:e2:9a:22:46:18:18:de:a7:fd:10:d2:77:13:
         25:ad:06:99:23:68:9b:48:17:55:40:24:7b:fe:aa:87:22:a3:
         d7:8a:df:32:24:6d:80:03:40:7a:5c:07:b6:ac:f9:7a:4e:ad:
         7a:1d:0d:7b:79:45:48:da:74:81:48:5d:cf:e9:17:7c:41:a3:
         0c:a5:c7:c3:d2:8e:e6:0a:6f:45:ad:ab:ee:d7:96:f0:08:b1:
         74:33:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----